Troubleshoot Feature Key Synchronization

With Feature Key Synchronization, your Firebox can automatically download the latest feature key from the WatchGuard website when a feature is expired or about to expire.

Check the Firebox Configuration

To make sure that your Firebox can automatically download the latest feature key, check these items in the configuration:

  • Feature Key Synchronization must be enabled. For configuration instructions, see Enable Feature Key Synchronization and Alarm Notification.
  • The Firebox must be configured to use a DNS server that can resolve the domain For instructions to configure a network (global) DNS server on the Firebox, see Configure Network DNS and WINS Servers.
  • The Firebox must be able to connect outbound over HTTPS to the WatchGuard website. If the Firebox has an external Internet gateway that filters Internet access, the gateway must allow HTTPS connections from the Firebox to

Test Manual Synchronization

If you have enabled Feature Key Synchronization, your Firebox tries to download a new feature key if any licensed feature is expired, or will expire within seven days. If Feature Key Synchronization does not happen automatically, or if you need to synchronize your feature key immediately, you can manually synchronize or install a new feature key. For more information, see Get a Firebox Feature Key.

If manual synchronization fails, use the troubleshooting steps below to identify and resolve the reason for the failure.

Test DNS Resolution

To download a feature key, your Firebox must be able to resolve the DNS name

To test DNS host name resolution from the Firebox, in Fireware Web UI:

You can use the DNS Lookup diagnostic task to test DNS name resolution from the Firebox.

Collect Diagnostic Log Data for Support

If you cannot resolve the feature key synchronization yourself, you can contact WatchGuard Technical Support for assistance. When you contact support, your technician may ask you to retrieve a support.tgz file from your Firebox.. For best results, retrieve a support.tgz file from the Firebox immediately after you attempt a manual feature key synchronization.

Attach the support.tgz file to your support case.

See Also

About Feature Keys

About Feature Keys and FireCluster